Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding tests for the compatibility mode with OpenSSL #350

Open
wants to merge 1 commit into
base: tls13-prototype
Choose a base branch
from

Conversation

hannestschofenig
Copy link
Owner

The keyword for openssl configuration is -no_middlebox

Status

READY

Requires Backporting

NO; for use with versions earlier than TLS 1.3 this feature has no equivalent.

Migrations

NO

Additional comments

With the help of the command line option -C (or --compatibility) the use of the compatibility mode can be enabled or disabled. Without the command line option, both cases will be tested.

Todos

  • Tests
  • Documentation

Steps to test or reproduce

Run the following command in the tests directory:

bash compat.sh -v -p OpenSSL -m tls1_3 -t ECDSA

This command will execute tests with and without the compability support.

Run the following commands to either enable or disable the use of the compability support in TLS 1.3 of OpenSSL.

bash compat.sh -v -p OpenSSL -m tls1_3 -t ECDSA -C YES

bash compat.sh -v -p OpenSSL -m tls1_3 -t ECDSA -C NO

The keyword for openssl configuration is -no_middlebox
@@ -97,6 +98,7 @@ print_usage() {
printf " -p|--peers\tWhich peers to use (Default: '%s')\n" "$PEERS"
printf " \tAlso available: GnuTLS (needs v3.2.15 or higher)\n"
printf " -M|--memcheck\tCheck memory leaks and errors.\n"
printf " -C|--compatibility\tTest TLS 1.3 compatibility mode (Default: '%s')\n" "$BOXES"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Curious: why not use -c? I don't think it is used yet.

@@ -97,6 +98,7 @@ print_usage() {
printf " -p|--peers\tWhich peers to use (Default: '%s')\n" "$PEERS"
printf " \tAlso available: GnuTLS (needs v3.2.15 or higher)\n"
printf " -M|--memcheck\tCheck memory leaks and errors.\n"
printf " -C|--compatibility\tTest TLS 1.3 compatibility mode (Default: '%s')\n" "$BOXES"
printf " -v|--verbose\tSet verbose output.\n"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we sort the options alphabetically? If so we might want to move the help for -v up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants